CVE-2011-4129

(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in libsocialweb before 0.25.20 automatically connect to Twitter when no Twitter account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.

• CWE-200

• http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94Issue Tracking, Patch
• http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5becIssue Tracking, Patch
• http://www.openwall.com/lists/oss-security/2011/11/09/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/11/09/5Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=752022Issue Tracking
• http://git.gnome.org/browse/libsocialweb/commit/?id=0086bfbfc07345438123a87957e0bc12226e2b94Issue Tracking, Patch
• http://git.gnome.org/browse/libsocialweb/commit/?id=8982cf504cf3767761fe85d9558beab3d9da5becIssue Tracking, Patch
• http://www.openwall.com/lists/oss-security/2011/11/09/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/11/09/5Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=752022Issue Tracking

Published

Oct 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4123Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-4124Input validation issues were found in Calibre at devices/lin…9.8
• CVE-2011-4125A untrusted search path issue was found in Calibre at device…9.8
• CVE-2011-4126Race condition issues were found in Calibre at devices/linux…8.1
• CVE-2011-4127The Linux kernel before 3.2.2 does not properly restrict SG_…
• CVE-2011-4128Buffer overflow in the gnutls_session_get_data function in l…
• CVE-2011-4130Use-after-free vulnerability in the Response API in ProFTPD …
• CVE-2011-4131The NFSv4 implementation in the Linux kernel before 3.2.2 do…
• CVE-2011-4132The cleanup_journal_tail function in the Journaling Block De…
• CVE-2011-4133Cross-site request forgery (CSRF) vulnerability in Moodle 1.…
• CVE-2011-4134Heap-based buffer overflow in lmadmin in Flexera FlexNet Pub…
• CVE-2011-4135Multiple directory traversal vulnerabilities in lmgrd in Fle…